="user"
type=USER_CMD msg=audit(1758477540.217:188): pid=1460 uid=1000 auid=1000 ses=1 subj=unconfined msg='cwd="/home/user" cmd="/usr/libexec/sdwdate-gui/sdwdate-gui" exe="/usr/bin/sudo" terminal=? res=success'